policy,state: authorize reauth tags against the authenticating user

Re-authenticating a tagged node with --advertise-tags checked the tag-owned
node, not the authenticating user, so every tag was rejected.

Fixes #3374

(cherry picked from commit 6275e3a356)
This commit is contained in:
Kristoffer Dalby
2026-07-22 06:44:22 +00:00
committed by Kristoffer Dalby
parent 1fccdb18bd
commit 4a1e77359d
7 changed files with 800 additions and 4 deletions
+2
View File
@@ -371,6 +371,8 @@ jobs:
- TestTagsAuthKeyConvertToUserViaCLIRegister
- TestTaggedNodeLogoutReloginSingleUseKeyOnline
- TestTaggedNodeLogoutReloginReusableKeyOnline
- TestTagsOIDCReauthAddOwnedTag
- TestTagsReauthEmptyTagsReturnsToUserSurvives
- TestTS2021WebSocketGET
- TestTS2021WASMClientUnderNode
- TestTailscaleRustAxum